Re:I Miss Rails
by connor4312 on Thursday March 28, 2019 @09:21PM
(#19518332)
It's been about four years since we touched it. When we used Waterline (the Sails ORM), we discovered two distinct SQL injection vulnerabilities in it, without intentionally looking. I would link the related issues, but they seem to have disabled Github issues in the waterline repository[1]. That--and lots more--scared us away. We switched happily to Hapi[2] with about a week of work and never looked back.
The major stable version came with a lot of improvements.
I'm not saying sails.js is the best option for a big project, but is pretty decent for prototypes and fast development.
Unless there have been some major changes I highly advise staying away from sails.js.